Update SSL directives

I noticed another post on the mailing list with CASValidateServer Off.  I'd like to make good on killing it, and clean up the other no-op directive.